Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- Medium6.9A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0.Check if you run itEPSS 0.38%Dec 19, 2025
- Medium4.8A security flaw has been discovered in floooh sokol up to 33e2271c431bf21de001e972f72da17a984da932.Check if you run itEPSS 0.22%Dec 19, 2025
- Medium5.3CVAT is an open source interactive video and image annotation tool for computer vision.Check if you run itEPSS 0.29%Dec 19, 2025
- High7.1Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 5.79%Dec 19, 2025
- High7.7Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 6.30%Dec 19, 2025
- Low0.6Orejime is a consent manager that focuses on accessibility.Check if you run itEPSS 0.22%Dec 19, 2025
- High7.4ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interactioCheck if you run itEPSS 0.23%Dec 19, 2025
- High7.5ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasCheck if you run itEPSS 0.27%Dec 19, 2025
- Critical9.7Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs.Check if you run itEPSS 0.57%Dec 19, 2025
- Medium6.4pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation.Check if you run itEPSS 0.32%Dec 19, 2025
- Medium6.8Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.Check if you run itEPSS 0.23%Dec 19, 2025
- Critical9.1Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directlCheck if you run itEPSS 0.32%Dec 19, 2025
- Medium4.9Galette is a membership management web application for non profit organizations.Check if you run itEPSS 0.30%Dec 19, 2025
- Low2.1Galette is a membership management web application for non profit organizations.Check if you run itEPSS 0.32%Dec 19, 2025
- Critical10.0n8n Improper Control of Dynamically-Managed Code Resources VulnerabilityPatch nowKEVEPSS 98.99%Dec 19, 2025
- Critical9.3AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictable generation of an installation salt using PHP uniqid().Check if you run itEPSS 1.48%Dec 19, 2025
- Low1.3Galette is a membership management web application for non profit organizations.Check if you run itEPSS 0.24%Dec 19, 2025
- Medium6.9A vulnerability was detected in Campcodes Supplier Management System 1.0.Check if you run itEPSS 0.44%Dec 19, 2025
- Medium6.9A security vulnerability has been detected in code-projects Scholars Tracking System 1.0.Check if you run itEPSS 0.39%Dec 19, 2025
- Medium6.9A weakness has been identified in code-projects Scholars Tracking System 1.0.Check if you run itEPSS 0.39%Dec 19, 2025
- Medium4.8A flaw was found in libnbd.Check if you run itEPSS 0.14%Dec 19, 2025
- Low3.8Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.Check if you run itEPSS 0.25%Dec 19, 2025
- Low3.8An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.Check if you run itEPSS 0.25%Dec 19, 2025
Sort